cbcvebase.

Wso2 Email Otp Authenticator vulnerabilities

1 known vulnerability affecting wso2/email_otp_authenticator.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2024-0391P4MEDIUMCVSS 4.3≥ 1.0.18, < 1.0.18.72026-05-11
CVE-2024-0391 [MEDIUM] CWE-204 CVE-2024-0391: The check user account lock states feature within the email OTP flow fails to validate user input, a The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid usernames can increase the risk of brute-force and social engineering attacks. Attackers can leverage this information to craft targeted phishing campaigns o
nvd
Wso2 Email Otp Authenticator vulnerabilities | cvebase